Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137352e302f32342d3234203d3e20313338303737.roa
File: 3131302e34342e3137352e302f32342d3234203d3e20313338303737.roa (raw, json)
Hash identifier: O+6VsyOwjsTF88G1fhZcvx1T8zfIy6JK2YgY+JPGs4g=
Subject key identifier: B2:3F:41:28:82:3A:41:2D:EA:77:24:EB:7D:4D:0F:A7:9D:78:DC:B2
Certificate issuer: /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial: 3057B70A503EF7D418808565839B5770AF7EA687
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137352e302f32342d3234203d3e20313338303737.roa
Signing time: Wed 21 Aug 2024 15:10:54 +0000
ROA not before: Wed 21 Aug 2024 15:05:54 +0000
ROA not after: Wed 20 Aug 2025 15:10:54 +0000
asID: 138077
IP address blocks: 110.44.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Aug 2024 09:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:57:b7:0a:50:3e:f7:d4:18:80:85:65:83:9b:57:70:af:7e:a6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Validity
Not Before: Aug 21 15:05:54 2024 GMT
Not After : Aug 20 15:10:54 2025 GMT
Subject: CN=B23F4128823A412DEA7724EB7D4D0FA79D78DCB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0a:8d:b9:0a:65:72:aa:b0:96:8d:50:ff:6d:
bb:ba:96:70:b9:50:71:81:71:8f:57:66:74:1a:cf:
80:b7:34:1c:0d:82:ba:97:11:d1:6e:c5:c5:5d:b4:
12:3e:30:2f:b8:39:93:37:83:87:7e:1f:85:4c:7c:
00:d6:ad:82:52:4d:e0:ea:57:a3:1f:2a:f2:c3:37:
0f:0f:c0:98:65:1c:00:07:3d:b1:6d:2a:f5:a5:d4:
bf:18:30:2a:20:90:50:bc:ec:de:34:3d:c7:7e:92:
4b:52:06:2e:27:40:aa:ad:32:0f:4e:a7:b9:e1:a7:
ee:c9:5a:fe:b4:ce:0d:22:df:b0:f5:46:4a:ab:5e:
c5:f1:84:9d:a1:bb:d6:d2:60:e5:2e:7b:04:cd:a9:
c0:ab:c6:d9:29:0d:ae:a8:d1:b3:a9:b1:2c:e8:b1:
b1:31:81:65:96:67:d1:08:c7:c8:60:c0:c3:99:45:
5d:60:2a:11:2b:02:a5:0e:f6:f2:9c:1c:6d:0c:05:
7a:0d:d7:2c:a6:04:37:c2:cd:cf:41:1c:f6:71:43:
bf:29:d3:cf:63:b2:1d:12:da:c8:74:ab:70:ae:4d:
3f:a3:05:e8:f6:16:45:06:ae:7b:ce:ea:e5:ce:d1:
b4:2d:29:11:ce:2e:1f:92:f8:44:b6:f7:f0:2b:58:
82:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3F:41:28:82:3A:41:2D:EA:77:24:EB:7D:4D:0F:A7:9D:78:DC:B2
X509v3 Authority Key Identifier:
keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137352e302f32342d3234203d3e20313338303737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.44.175.0/24
Signature Algorithm: sha256WithRSAEncryption
51:9f:bd:7c:27:8b:ac:df:ee:45:30:a6:e6:12:cb:50:26:56:
72:b5:80:f6:fe:8d:6d:a0:2c:ab:ec:eb:98:25:a6:3b:6d:1c:
e7:b1:d6:56:9b:37:43:b5:64:11:b6:ac:ec:d8:58:ed:6c:58:
4b:1e:8f:18:6d:9c:02:0d:8c:ff:48:af:ad:04:8a:66:9e:1c:
dd:70:be:e3:95:98:14:0d:85:2d:69:cf:e6:d1:7e:15:eb:71:
6c:73:a3:f9:9c:9e:ac:de:67:ae:0c:79:58:67:14:5f:c2:c8:
9e:07:4f:00:97:14:6c:11:49:04:85:67:75:19:60:89:ef:12:
37:77:ab:46:5d:a3:5b:f8:52:4e:62:93:54:42:93:b5:35:23:
99:22:46:9a:38:b6:ba:16:73:18:da:98:c0:b3:7d:33:db:e0:
b0:e4:f6:a6:3b:27:68:a4:82:c4:8a:89:83:69:fc:76:4f:80:
3c:aa:37:4b:fb:81:bd:09:9d:5a:a2:28:d1:83:92:d3:01:8d:
28:a8:e5:b1:41:72:3c:2e:b0:f6:ad:92:9b:55:85:0f:72:62:
ed:eb:37:38:fe:94:d9:d3:54:f8:a8:2f:0e:c8:5d:8b:e2:aa:
b6:59:af:1c:d4:52:93:65:0e:27:d9:ce:75:02:8e:94:9c:03:
c4:8b:19:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 11:11:46 2024 by rpki-client on console-fra.rpki-client.org